W32.DoS.Trinoo - Removal

Risk Level 1: Very Low

Printer Friendly Page

Discovered: December 30, 1999
Updated: February 13, 2007 11:55:14 AM
Also Known As: W32/Trinoo, Trinoo, TROJ_TRINOO
Type: Trojan Horse


Using Windows Explorer delete the following file:

C:\WINDOWS\SYSTEM\service.exe

Using regedit delete the following registry key:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\"System Services"="service.exe"

Writeup By: Motoaki Yamamura
Search by name
Example: W32.Beagle.AG@mm
Windows 7
Windows Vista Security